Use Windows Group Policy to block USB flash drives

Nowadays, USB flash drives are widely used. No matter whether it is brand-name or compatible, after purchasing a USB flash drive, you all like to use it together and copy it to the east and west for convenience. However, most machines are not allowed to use USB flash drives because of business competition, because the boss is uncomfortable and worried about commercial leaks. This is not the case. Recently, the boss of the organization asked me to completely block the USB flash drive (except for privileged users ). Hurry up, or the boss will blame it.

Most of our organizations use window2000 and windowxp systems. Window98 accounts for a small proportion, so the focus is on Shielding window2000 and windowxp. About blocking USB InterfaceArticleThere are a lot of online interfaces, most of which are blocked by the modification of CMOS, or the device packages in the i386 folder in the window system are completely deleted, and the USB bus controller is disabled. Some of these methods impede the application of other devices while achieving the goal, and the effect is not very friendly. This reminds me of whether to apply a group policy to block a disk, because I used it to block a disk, of course, it is not because private objects are also for product confidentiality. The idea is good. Let's take a look at the effect?

First, enter "gpedit. msc" in "start-> Run.", and then open as shown in 1:

Figure 1

We use "prevent access to the drive from my computer" to disable the USB interface. After double-click Enable, we found that not all drive letters exist as we imagined, as shown in Figure 2:

Figure 2